Privacy Policy

Zaf Play, based in Egypt, decides how your personal information is used. In law this makes us the “controller” of your information. For anything about your privacy, including your rights below, write to support@zafplay.com with “Privacy” in the subject. This is also how you reach the person who looks after data protection at Zaf Play.

When you create an account or use Zaf Play we collect:

• Account details: your full name, email address, mobile number, gender and username, and your password (stored in a scrambled form that we cannot read).
• If you sign in with Google: your name and email address from your Google account. We do not receive your Google password, contacts, or any other Google data.
• Booking activity: the courts, dates and times you book, open games and tournaments you host or join, extras you add, changes, cancellations, refunds, waiting-list requests, the star ratings you give, games played and no-shows, your friends list and your referral activity.
• Money details: the InstaPay mobile number or link you give us for refunds, and your Zaf Play credit balance.
• Payment proofs: the screenshot you upload to show an InstaPay (bank transfer) payment, and the proofs we or court owners upload for refunds and payouts. These can show bank or wallet details, so we treat them with extra care. We do not collect or store card numbers; payments are made by bank transfer outside Zaf Play.
• Court owners: your business, branch and court details, branch map pins, photos, prices, extras, opening hours, team members you invite, players you block and the reason, the agreement you sign, and the InstaPay details needed to pay you.
• Messages: what you send us by email, Instagram or the forms on the site, such as an appeal against a block or your reason for deleting your account.
• Your location, only when you tap “Near me” on the website or in the app and allow it: it is used on your device to sort courts by distance and is not sent to or stored by Zaf Play. On the website it stays in that browser tab for up to 30 minutes.
• Technical data: basic logs such as IP address, browser type and the pages requested, made automatically by our hosting and security tools; short-lived counters of your IP address and login used to stop bots and repeated tries; anonymous visit counts (which pages are opened, from which kind of device and country); and your choice of light or dark theme saved on your device.

• To run your account: create and secure it, confirm your email and let you log in.
• To run bookings and payments: make, hold, change, cancel and refund bookings, check InstaPay payments, keep your Zaf Play credit, pay court owners and keep our accounts.
• To let court owners host you: they see the bookings made at their courts so they can run them.
• To keep Zaf Play safe and fair: prevent abuse, fraud, bots and fake bookings, apply our cancellation and no-show rules, show your player level (games played and no-shows) to hosts and court owners, and let court owners and Zaf Play block players who break the rules.
• To talk to you: send emails about your account, bookings, payments and games (for example confirmation codes, password resets and booking updates). These are part of the service, so they are sent while you have an account.
• News and offers: if you agree, we may tell you about new courts, sports, features and offers on Zaf Play. You can stop these at any time with the link in the email or by writing to us. We never let other companies send you advertising through us.
• To improve Zaf Play: fix problems, understand which features people use, and plan new courts and sports.
• To make statistics: we combine information so that no one can be identified (for example, the busiest hours in an area or how full a court is), and we may share these with court owners and partners or publish them.
• To follow the law and protect our rights: keep tax and accounting records, answer lawful requests, and handle complaints and disputes.
• If Zaf Play joins with, or is sold to, another company, your information may move to the new owner, who must keep following this policy. We will tell you before that happens.

The law asks us to have a reason for each use. Ours are:

• To keep our agreement with you: we need your account, booking and payment details to give you the service you asked for.
• Your consent: when you upload a payment screenshot, share your location with “Near me”, or agree to news and offers. You can take your consent back at any time; this does not undo what was done before.
• Legal duties: keeping payment and accounting records and answering lawful requests.
• Our fair business interests, balanced against your rights: safety and fraud checks, player levels and blocks, improving the service and anonymous statistics.

We do not sell your personal information. It is shared only as follows:

• Court owners and their staff see your name, mobile number, player level and the details of your booking at their court, so they can host you. They may use your details only to run that booking, not to market to you, unless you agree to it with them directly. You see the court’s phone number around the time of your game.
• Other players see your name or username and player level in open games, tournaments and friend requests you take part in.
• Zaf Play administrators see account, booking and payment information to approve payments, handle refunds and give support.
• Service providers that help us run Zaf Play, only as much as they need and under our instructions: Supabase (database, login and file storage), Vercel (website hosting and anonymous visit counts), Resend (sending our emails), Telegram (alerts to the Zaf Play team about payments and requests to review), Google (only if you choose “Continue with Google”), and ImprovMX (forwards emails sent to our support address). On the website our maps come from our own server (built from OpenStreetMap data), so no map company sees where you look or where you are. In the Zaf Play app the map is shown by Google Maps (Android) or Apple Maps (iPhone), so they see the area you look at and, while Near me is on, your position, under their own privacy rules. If we add or change a provider, we will update this list.
• Our professional advisers, such as lawyers and accountants, when needed, under a duty to keep it confidential.
• A new owner of Zaf Play, as described above.
• Authorities and courts, when the law requires it, or to protect the safety of people or the rights of Zaf Play.
• Anyone else, only if you ask us to or agree to it.

Our database and website run on servers in Germany (European Union), and some of our providers, such as Resend, Telegram, Google, Apple and ImprovMX, are based in the United States or other countries. This means your information is sent outside Egypt. We only use providers that protect personal information to a recognised standard, and we take the steps the Egyptian law requires for these transfers.

We keep your information only as long as we need it:

• Your account details: while your account is open. When you delete it, they are deleted straight away (see “Your rights” below).
• Bookings, payments, refunds, payouts and payment proofs: up to 5 years after the booking, for our accounts, tax and any dispute. They keep the name and mobile number used for each booking.
• Blocks and appeals: while the block lasts, and up to 1 year after it ends.
• Your reason for deleting your account: up to 5 years, with the payment records.
• Sign-ups that were never confirmed: about 24 hours.
• Security logs and bot counters: up to 90 days.
• Messages you send us: up to 2 years after we last talk, unless they are part of a dispute.

After these times we delete the information or make it anonymous, so it can no longer be linked to you. Anonymous statistics may be kept.

Zaf Play stores a small amount of data on your device to keep you logged in (for up to 30 days), remember your theme, your last sport and area, and keep the court and times you picked while you log in. Our visit counts do not use cookies and do not identify you. We do not use advertising or tracking cookies. If we ever want to, we will ask you first.

Data is sent over encrypted connections and stored with access controls, so players can only see their own bookings and payment proofs, and payment proofs are kept in private storage. If a security problem puts your information at real risk, we will tell the Personal Data Protection Center within 72 hours and tell you as the law requires. No online service is perfectly secure, so please use a strong password and never share your login codes with anyone.

Under the Personal Data Protection Law you can:

• Know what information we hold about you and get a copy of it.
• Correct it if it is wrong or out of date.
• Ask us to delete it, or to stop or limit using it.
• Take back your consent, and stop news and offers at any time.
• Be told if your information is affected by a security problem.
• Complain to the Personal Data Protection Center in Egypt if you think we have not respected your rights. Please write to us first so we can try to fix it.

You can see and update your name, mobile number, gender, username and email in Profile → Account, and log out of all devices there.

Delete your account: players can do it themselves at any time in Profile → Delete my account (see https://www.zafplay.com/delete-account). Your login, name, email, mobile number, username, gender, friends, invitations and waiting-list requests are deleted straight away. Past bookings and payment records are kept, with the name and mobile number used for each, for the times listed above, so we can settle payouts and refunds. Court owners and team members can ask us by email.

For any other request, email support@zafplay.com from the address on your account, so we know it is you. We will answer as soon as we can and within the time the law sets. Some information we must keep by law, or to settle money still owed, even after you ask us to delete it; if so, we will tell you what and why.

We may update this policy as Zaf Play grows. We will change the date at the top. If a change is important, for example a new use of your information, we will tell you on the website or by email before it starts, and ask for your consent again where the law requires it.

Questions about your privacy? Email support@zafplay.com with “Privacy” in the subject, or message us on Instagram @zaf.play.